HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 465 (SMTPS)

HoneyLabs honeypots recorded 1,009 probes against destination port 465 (SMTPS) from 175 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:29, most recently 2026-11-15 06:22 (UTC).

What the sensors show

The sources sat in 27 networks across 19 countries. One address, 213.177.179.109, sent 63% of them. The largest source network was AS208137 (Feo Prest SRL), with 63% of the probes from 1 address. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
213.177.179.109636Feo Prest SRLIR
18.218.118.20321Amazon.com, Inc.US
18.116.101.22017Amazon.com, Inc.US
31.57.216.3911VPS Dedicated LLCAE
3.129.187.389Amazon.com, Inc.US
87.251.64.1268Shesternin Vladimir AnatolievichRU
152.32.140.128UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDNG
45.148.10.58Techoff Srv LimitedNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS208137Feo Prest SRL6361
AS15169Google LLC8233
AS16509Amazon.com, Inc.514
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED335
AS8075Microsoft Corporation2929
AS14061DigitalOcean, LLC2814

Where it comes from

CountryProbes
Iran636
United States170
Belgium82
United Arab Emirates20
Hong Kong20
Russia14

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3637
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity26
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3614
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.010

Port report

Port report

Loading